一些用户尝试在家用路由器上配置 Mac 过滤来管理连接到 Range Extender 的客户端，但最终发现他们的配置无法正常运行。在这里，我们将概述原因并提供有关如何使其工作的全面说明。
这里我们以M1800和RE1200作为演示。
准备：
1. 确保 Range Extender 已与路由器成功配置。
2. 在 Range Extender 的 Web 界面中，转到高级设置-> MAC 中继器并启用它。
Range Extender 的工作机制是，它会将自己创建的虚拟 MAC 地址与每个客户端的实际 MAC 地址进行交换。由于路由器会将客户端的虚拟 MAC 地址视为其实际 MAC 地址，因此我们需要在路由器的 MAC 过滤中输入客户端的虚拟 MAC 地址，而不是其实际 MAC 地址。通过对比以下信息，您可以更好地理解该过程。
步骤 1：检查您计算机的真实 MAC 地址 (74-86-E2-0E-0D-87)。
您还可以在 Range Extender 的客户端列表中检查 IP 地址。
注意：大多数手机可能使用私有 MAC 地址，该地址需要在设备的 WLAN 设置页面上更改为设备 MAC 地址。
步骤 2：然后检查路由器 Web 界面上显示的计算机 MAC 地址。（通常在 DHCP 页面上）。这是您的计算机的虚拟 MAC 地址 (B2:4B:D6:0E:0D:87)
注意：您还可以发现计算机显示为无线设备，因为计算机已连接到无线链接到路由器的范围扩展器。
步骤3 ：可以看到，路由器只能看到你电脑的虚拟MAC地址，而看不到真实的MAC地址。而且有一个规律，你会发现MAC地址的最后六位都是相同的。
真实 MAC 地址：74:86:E2: 0E:0D:87
虚拟 MAC 地址：B2:4B:D6: 0E:0D:87
步骤 4：找到打印在底部标签上的范围扩展器的真实 MAC 地址并将其写完 (B4:4B:D6:25:FE:C4)。
再次转到路由器的客户端列表，您会发现“B2：4B：D6：25：FE：C4”和“B2：4B：D6：25：FE：C6”是范围扩展器的 MAC 地址。
注意：对于双频范围扩展器，它通过两个频段与路由器通信，因此您需要将范围扩展器的两个 MAC 地址放在 MAC 过滤器列表中。
步骤5：选择“仅允许列表（类似于白名单） ”并添加您想要上网的设备的特定虚拟 MAC 地址。
如果您想要将另一个设备添加到列表中，您需要找出虚拟 MAC 地址并将其添加到路由器的 MAC 过滤器列表中。
2 条评论
@Dear Afeef,
There are two settings may override the MAC Filter.
1. SPI Firewall. Enabled by default. If you disable it on the web page. The MAC Filter will not work.
2. IPv6. The firewall is not working on IPv6 traffics now. So If you enable the IPv6 function. The IPv6 traffics will still work even if you enable the MAC filter function. You can disable IPv6 and check again.
“Dear Cudy Technical Support,
I have a problem with the MAC Filter function on my Cudy router, and I would appreciate your technical clarification.
Router model:
Cudy WR3000 V1.0
Firmware version:
2.4.19-20250829-192837
Operating mode:
Main Router Mode"
Dear Cudy Technical Support,
I have a problem with the MAC Filter function on my Cudy router, and I would appreciate your technical clarification.
Router model:
Cudy WR3000 V1.0
Firmware version:
2.4.19-20250829-192837
Operating mode:
Main Router Mode
The problem is that when I add a device’s MAC address to the MAC Filter blacklist/block list, the device is not blocked from Internet access. The device remains connected to the Wi-Fi and can still access the Internet normally.
I have already verified the following:
The router is operating in Main Router Mode. I am using the MAC address shown by the router in the connected devices/client list. The MAC address is added to the MAC Filter block list. MAC Filter is enabled. I applied/saved the configuration. I disconnected and reconnected the client to Wi-Fi after applying the rule. The client still has full Internet access.I am not referring to the Parental Control/Web Filter or domain blacklist. My issue is specifically with the MAC Filter / MAC Access Control function, where I expect a blocked MAC address to lose Internet access.
Could you please clarify:
1. Is MAC Filter fully supported and working on WR3000 V1.0 with firmware 2.4.19?
2. When using “Allow all except listed”, should a listed MAC address be completely prevented from accessing the Internet?
3. Are there any known bugs or limitations with MAC Filter in firmware 2.4.19?
4. Does MAC Filter behave differently between the 2.4 GHz and 5 GHz networks?
5. Does the MAC Filter work differently when Private/Random MAC Address is used by the client?
6. Are there any other settings that could override or bypass the MAC Filter?
7. If this is a firmware issue, is there a newer beta firmware or recommended workaround that fixes it?
I would appreciate it if you could explain why the blocked device is still able to access the Internet and provide the correct configuration or troubleshooting steps.
Thank you for your support.
Best regards,
Afeef